From 2667f5733804de4263bbd23f49e4e5d5b4ce6fa3 Mon Sep 17 00:00:00 2001
From: Marc Mutz <marc.mutz@qt.io>
Date: Tue, 11 Mar 2025 11:50:30 +0100
Subject: [PATCH] Mark QCryptographicHash and QMAC as security-critical

If these classes aren't security-criticial, what is?

Amends 8df072fc8006510c9b743e8ffedaaf51a876883a.

QUIP: 23
Task-number: QTBUG-135198
Pick-to: 6.8
Change-Id: I50f4ab8139948be57107d27eb2a0b7eb9f898e32
Reviewed-by: Matthias Rauter <matthias.rauter@qt.io>
(cherry picked from commit 25cc585a1321a632b4c2aa56b2ef33248c5fb5cd)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
---
 src/corelib/tools/qcryptographichash.cpp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/corelib/tools/qcryptographichash.cpp b/src/corelib/tools/qcryptographichash.cpp
index 909e16148f1..fe05bdc70a0 100644
--- a/src/corelib/tools/qcryptographichash.cpp
+++ b/src/corelib/tools/qcryptographichash.cpp
@@ -2,6 +2,7 @@
 // Copyright (C) 2013 Ruslan Nigmatullin <euroelessar@yandex.ru>
 // Copyright (C) 2013 Richard J. Moore <rich@kde.org>.
 // SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
+// Qt-Security score:critical reason:cryptography
 
 #include <qcryptographichash.h>
 #include <qmessageauthenticationcode.h>